Infrastructure Yum Repo SOP

From FedoraProject

In some cases RPM's in Fedora need to be rebuilt for the Infrastructure team to suit our needs. This repo is provided to the public (except for the RHEL RPMs). Rebuilds go into this repo which are stored on the netapp and shared via the proxy servers.

Building an RPM

Building an RPM for Infrastructure is significantly easier then building an RPM for Fedora. Basically get your SRPM ready, have someone go over it and make sure it looks ok. Then build it in mock or koji. Once you have your RPM ready... Test it!

Remember to build it for every dist / arch you need to deploy it on.

Signing the RPM

Requesting Access

Infrastructure RPM's are signed by the Infrastructure key: http://infrastructure.fedoraproject.org/RPM-GPG-KEY-INFRASTRUCTURE Access to this key is restricted. If you feel you need it email MikeMcGrath with a request for access (if Mike isn't around some of the other Infrastructure people also have access like ToshioKuratomi. You'll only need to ask for the key once. It has a password which will be given to you as well.

Signing the RPM

Once your key has been set up, you can sign the RPMs with:

rpm --resign your-package-1.1.rpm

Re-creating the repo

All of the repositories are located at:

puppet1:/mnt/fedora/app/fi-repo/rhel

Simply copy your rpm to the proper dist/arch/ then run create repo from that directory.

Don't forget to sign and deploy your SRPM!

This is an example of copying and creating a repo for myPack-1.0.noarch.rpm

RHEL repo

In addition to the Infrastructure repo, there is a RHEL5 repo that all machines update from, accessible only to our machine's IPs. This repo syncs again RHN daily at 1:30 UTC. To manually resync the RHEL repo against RHN, run the following on as root on puppet1: